Vulnerability index

Browse CVEs

1,134 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

R6850 Firmware CRITICAL 9.8
CVE-2024-30568EPSS 47%

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter.

No fix yet
Fix from $2,300 2024-04-03
R6850 Firmware HIGH 8.0
CVE-2024-30572

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.

No fix yet
Fix from $1,950 2024-04-03
R6850 Firmware HIGH 7.5
CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication requ…

No fix yet
Fix from $1,950 2024-04-03
R6850 Firmware HIGH 7.5
CVE-2024-30571EPSS 14%

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authenticat…

No fix yet
Fix from $1,950 2024-04-03
R6850 Firmware MEDIUM 5.3
CVE-2024-30570

An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

No fix yet
Fix from $1,600 2024-04-03
Dgnd4000 Firmware HIGH 8.8
CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi compon…

Mitigation only
Fix from $1,950 2024-03-14
Cbk40 Firmware HIGH 7.5
CVE-2024-28340

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attacker…

No fix yet
Fix from $1,950 2024-03-12
Cbk40 Firmware MEDIUM 5.4
CVE-2024-28339

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to …

No fix yet
Fix from $1,600 2024-03-12
Rax30 Firmware HIGH 8.8
CVE-2023-48725EPSS 19%

A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A sp…

No fix yet
Fix from $1,950 2024-03-07
R7000 Firmware MEDIUM 6.5
CVE-2024-1431

A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of…

No fix yet
Fix from $1,600 2024-02-11
R7000 Firmware MEDIUM 6.5
CVE-2024-1430

A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown funct…

No fix yet
Fix from $1,600 2024-02-11
Wnr2000 Firmware CRITICAL 9.8
CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs dur…

No fix yet
Fix from $2,300 2023-12-15
Rbr750 Firmware CRITICAL 9.8
CVE-2023-49007EPSS 9%

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.

Fix: 7.2.6.21+
Fix from $2,300 2023-12-08
Prosafe Network Management System CRITICAL 9.8
CVE-2023-49693

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticate…

Fix: 1.7.0.34+
Fix from $2,300 2023-11-29
Prosafe Network Management System HIGH 7.8
CVE-2023-49694

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in…

Fix: 1.7.0.31+
Fix from $1,950 2023-11-29
Cbr40 Firmware CRITICAL 9.8
CVE-2023-36187

Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via craf…

Fix: 1.0.1.70 / 1.0.4.118+
Fix from $2,300 2023-09-01
Jwnr2000v2 Firmware HIGH 8.8
CVE-2023-39550

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and …

No fix yet
Fix from $1,950 2023-08-07
R7100lg Firmware CRITICAL 9.8
CVE-2023-38928

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi.

Mitigation only
Fix from $2,300 2023-08-07
Xr300 Firmware HIGH 8.8
CVE-2023-36499

Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi.

No fix yet
Fix from $1,950 2023-08-07
R6900p Firmware HIGH 8.8
CVE-2023-38412

Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.

No fix yet
Fix from $1,950 2023-08-07
Dg834gv5 Firmware HIGH 8.8
CVE-2023-38591

Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi.

No fix yet
Fix from $1,950 2023-08-07
Wg302v2 Firmware HIGH 8.8
CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via…

Mitigation only
Fix from $1,950 2023-08-07
Jwnr2000v2 Firmware HIGH 8.8
CVE-2023-38922

Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and …

Mitigation only
Fix from $1,950 2023-08-07
Dc112a Firmware HIGH 8.8
CVE-2023-38925EPSS 15%

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.c…

Mitigation only
Fix from $1,950 2023-08-07
Ex6200 Firmware HIGH 8.8
CVE-2023-38926

Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set.

No fix yet
Fix from $1,950 2023-08-07
Dgn3500 Firmware MEDIUM 6.5
CVE-2023-38924

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.

Mitigation only
Fix from $1,600 2023-08-07
R6250 Firmware CRITICAL 9.8
CVE-2023-34563EPSS 14%

netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

No fix yet
Fix from $2,300 2023-06-20
R6250 Firmware CRITICAL 9.8
CVE-2023-33532EPSS 16%

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges…

Mitigation only
Fix from $2,300 2023-06-06
D6220 Firmware HIGH 8.8
CVE-2023-33533

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Ver…

No fix yet
Fix from $1,950 2023-06-06
Srx5308 Firmware MEDIUM 6.1
CVE-2023-2395

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Manageme…

No fix yet
Fix from $1,600 2023-04-28